8133 matches found
CVE-2020-27990
Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...
CVE-2020-27990
Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...
Design/Logic Flaw
Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...
Forrester TEI study: Azure Sentinel delivers 201 percent ROI over 3 years and a payback of less than 6 months
2020 has been a transitional year, ushering in broad changes in how, and where, we work. Security operations SecOps teams face more significant challenges than ever as they protect the organization in this rapidly changing environment. These teams need a flexible, cost-effective, and efficient...
CVE-2020-27990
Nagios XI before 5.7.5 is vulnerable to a Cross‑Site Scripting (XSS) vulnerability in the Deployment tool (Add Agent/Proxy). The issue affects Nagios XI deployments prior to 5.7.5 and is described across multiple sources (CVE-2020-27990; CNVD-2020-63972). Root cause and exact exploit details are ...
CVE-2020-27990
Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...
Inrupt’s Solid Announcement
Earlier this year, I announced that I had joined Inrupt, the company commercializing Tim Berners-Lees Solid specification: The idea behind Solid is both simple and extraordinarily powerful. Your data lives in a pod that is controlled by you. Data generated by your things -- your computer, your...
Leonidas - Automated Attack Simulation In The Cloud, Complete With Detection Use Cases
Leonidas is a framework for executing attacker actions in the cloud. It provides a YAML-based format for defining cloud attacker tactics, techniques and procedures TTPs and their associated detection properties. These definitions can then be compiled into: A web API exposing each test case as an...
Weak Password Vulnerability in Agile Deployment Management System
The business scope of Beijing Zhongchuang Vision Technology Co., Ltd. includes: technology development of communication equipment; technology development and technology transfer of electronic products. A weak password vulnerability exists in the Agile Deployment Management System, which can be...
Security Bulletin: WebSphere security vulnerability in IBM Content Foundation on Cloud
Summary IBM WebSphere Application Server Network Deployment security vulnerability in Content Platform Engine Container Vulnerability Details CVEID: CVE-2020-4421 DESCRIPTION: IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoo...
Description of the security update for Office Web Apps Server 2013: November 10, 2020
None None...
Description of the security update for Office Online Server: November 10, 2020
None None...
Description of the security update for Excel 2016: November 10, 2020
None None...
Description of the security update for SharePoint Server 2010: November 10, 2020
Description of the security update for SharePoint Server 2010: November 10, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...
Microsoft Releases November 2020 Security Updates
Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review Microsoft’s...
CVE-2020-9300
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure...
CVE-2020-9300
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure...
CVE-2020-9300
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure...
Design/Logic Flaw
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure...
CVE-2020-9300
Technical details about CVE-2020-9300 are not publicly provided in the connected documents. Monitor for updates from vendors and security bulletins; current sources only reiterate access-control issues without specifics.